This is Interesting: Free IT Magazines  
Home > Archive > Snort > September 2005 > [Snort-users] Interesting issue..





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author [Snort-users] Interesting issue..
James Lay

2005-09-02, 5:53 pm

Hey All!

So yea....I have two machines...both running Snort-2.4.0. Both have:

preprocessor stream4_reassemble: both,ports [all]

in the config

Now...what's interesting is that one machine gives me:

snort[2159]: WARNING /etc/snort/snort.conf(375) => flush_behavior set in
config file, using old static flushpoints (0)

on restart, but the other does not. Any way I can track down the
difference? I've added flush_behavior large_window to the machine that
gave the above line and all is right in the cosmos now. Was just
curious.

Both machines are running slackware 10.1 with snort compiled with no
compile options.

James


-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
________________________________________
_______
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists...nfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf....ist=snort-users
Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2009 webservertalk.com